Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
3.29.1, 3.41.1
-
3
-
3
Description
When a support zip is generated while using OrientDB, the SSL Certificates stored in the trusted.ks /keystore.ks files is included. This is very helpful to support team to debug issues trusting remote servers.
When a support zip is generated using PostgrSQL or H2, the contents of key_store_data table is NOT included.
The trusted.ks contains public certificates of remote servers to trust. Providing these in a support zip is not a security concern.
The private.ks ( despite its name) contains the node id of the NXRM instance. This also is not something that needs to be protected from Sonatype Support.
Expected
Include key_store_data contents in support zip.